Moderate: rhev-hypervisor6 security and bug fix update

Details

An updated rhev-hypervisor6 package that fixes one security issue andvarious bugs is now available.

The Red Hat Security Response Team has rated this update as having moderatesecurity impact. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available from the CVE link inthe References section.

Upgrade Note: If you upgrade the Red Hat Enterprise VirtualizationHypervisor through the 3.2 Manager administration portal, the Host mayappear with the status of "Install Failed". If this happens, place the hostinto maintenance mode, then activate it again to get the host back to an"Up" state.

A flaw was found in the way concurrent access to the clients ring bufferwas performed in the spice-server library. A remote user able to initiate aSPICE connection to a guest could use this flaw to crash the guest.(CVE-2013-4130)